$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3252f01d-313a-3219-93bf-843ea033951b.roa File: 3252f01d-313a-3219-93bf-843ea033951b.roa (raw, json) Hash identifier: CQ30Y9UFa5RZFYuA8nsk9Mw5rkE1Vf45KrantpP6RAk= Subject key identifier: 03:DD:0C:A5:E6:66:29:C3:44:52:80:03:71:16:EE:B6:6E:FA:28:D8 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285849B6DF4B2712C763D249B9ABC0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3252f01d-313a-3219-93bf-843ea033951b.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 31898 IP address blocks: 23.239.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4b:27:12:c7:63:d2:49:b9:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=470011e7-e4ca-42ef-82c5-e85e20509555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:77:d9:1d:f9:7f:2e:d9:20:38:82:ee:73: 91:59:26:08:96:83:4d:7e:e9:f0:fa:f6:9b:15:38: 73:99:4c:08:04:48:1d:0c:35:91:9b:51:b0:46:ec: df:4d:02:07:44:1d:97:2c:dc:5c:85:bc:07:cf:03: c4:64:59:3f:16:97:ba:e6:df:ac:f3:7e:e4:ce:d2: 14:d8:11:cb:2a:58:23:97:59:c9:38:ac:5e:77:0b: 49:39:e2:44:a0:c3:ea:cb:bc:c1:8b:4b:48:1a:5e: e5:00:21:d1:04:ad:2f:74:92:23:02:52:0d:25:e5: c1:82:2e:e2:d9:99:e5:c6:0d:79:ae:a2:2d:07:71: 27:af:61:f2:0f:1d:7f:8f:82:88:e1:20:c9:01:d0: 41:8c:3f:7b:b7:32:1e:1f:f2:aa:84:c1:dd:68:94: 08:19:fb:26:22:2d:fb:1a:5b:c2:b3:3d:c9:68:64: fa:c2:66:ef:e9:2c:67:c7:06:75:48:97:bc:19:90: eb:a2:53:0b:a5:91:15:09:c8:1c:5e:87:a7:eb:cb: b7:85:3d:6d:5a:55:a5:2e:3a:78:8e:4d:69:97:e2: 35:7b:51:09:a1:e2:8b:55:04:88:69:2e:2f:51:79: eb:d6:57:1c:a5:0f:2e:28:ff:6f:2e:ae:ef:75:98: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DD:0C:A5:E6:66:29:C3:44:52:80:03:71:16:EE:B6:6E:FA:28:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3252f01d-313a-3219-93bf-843ea033951b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:24:cb:e2:86:07:d4:72:56:10:67:51:e8:a8:0f:c7:ab:dc: 21:aa:8d:31:1d:bd:fe:fe:e2:12:6b:cd:25:a3:8b:4f:eb:0c: 33:0b:72:77:e3:07:f6:5a:c5:fd:0b:24:72:6d:d5:49:a5:d2: ee:f3:3b:b7:a3:62:3d:17:33:ee:3f:ae:7d:34:24:5c:32:9b: 4f:41:07:b1:df:47:a0:5c:b0:e7:a3:8a:4f:81:7e:60:72:2d: 1d:b8:30:93:b4:63:b4:23:56:1a:c5:59:f4:78:83:bd:06:d9: e1:17:19:3b:d9:e7:3d:9f:5c:68:b9:09:a0:cf:a1:a6:9a:52: cd:14:e1:06:86:b2:58:3d:04:f7:1c:32:f3:22:1d:37:56:16: f8:ed:b3:fe:b0:87:66:d4:96:9a:42:fb:e4:a2:35:6e:8b:9c: ad:91:7b:3f:19:d5:29:6b:81:b2:fb:50:65:8d:8b:e6:a2:9a: d9:c2:17:1d:2a:0a:f2:c0:43:2f:75:36:80:1a:26:cd:e3:6f: 65:e4:aa:c0:3f:44:6c:8d:f6:c5:02:52:14:73:4d:8b:29:89: 7d:3b:31:38:42:ac:4e:d7:b3:75:f8:37:ee:08:8c:a4:26:e6: 6d:81:c0:f0:35:93:93:7e:d7:10:f8:b8:eb:8e:53:35:8b:55: ff:9d:2b:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm230snEsdj0km5q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk NDcwMDExZTctZTRjYS00MmVmLTgyYzUtZTg1ZTIwNTA5NTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8J32R35fy7ZIDiC7nORWSYIloNNfunw+vab FThzmUwIBEgdDDWRm1GwRuzfTQIHRB2XLNxchbwHzwPEZFk/Fpe65t+s837kztIU 2BHLKlgjl1nJOKxedwtJOeJEoMPqy7zBi0tIGl7lACHRBK0vdJIjAlINJeXBgi7i 2Znlxg15rqItB3Enr2HyDx1/j4KI4SDJAdBBjD97tzIeH/KqhMHdaJQIGfsmIi37 GlvCsz3JaGT6wmbv6SxnxwZ1SJe8GZDrolMLpZEVCcgcXoen68u3hT1tWlWlLjp4 jk1pl+I1e1EJoeKLVQSIaS4vUXnr1lccpQ8uKP9vLq7vdZhfmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPdDKXmZinDRFKAA3EW7rZu+ijYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMzI1MmYwMWQtMzEzYS0z MjE5LTkzYmYtODQzZWEwMzM5NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoky+KGB9RyVhBnUeioD8er3CGqjTEdvf7+4hJrzSWji0/rDDMLcnfj B/Zaxf0LJHJt1Uml0u7zO7ejYj0XM+4/rn00JFwym09BB7HfR6BcsOejik+BfmBy LR24MJO0Y7QjVhrFWfR4g70G2eEXGTvZ5z2fXGi5CaDPoaaaUs0U4QaGslg9BPcc MvMiHTdWFvjts/6wh2bUlppC++SiNW6LnK2Rez8Z1SlrgbL7UGWNi+aimtnCFx0q CvLAQy91NoAaJs3jb2XkqsA/RGyN9sUCUhRzTYspiX07MThCrE7Xs3X4N+4IjKQm 5m2BwPA1k5N+1xD4uOuOUzWLVf+dK1E= -----END CERTIFICATE-----Generated at Tue May 13 02:22:32 2025 by rpki-client